Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: rUuxVH6XS0FAi+YwtOC6LbWwTFYXeby9cy+OsdXgwuc=
Subject key identifier: 49:DE:59:B2:CB:00:81:B3:1B:59:63:28:CB:5F:66:27:5D:D0:81:5E
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019A5074E077E4A7D913055A02D8EB4CE564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0B88
Signing time: Tue 04 Nov 2025 20:00:28 +0000
Manifest this update: Tue 04 Nov 2025 20:00:28 +0000
Manifest next update: Wed 05 Nov 2025 20:00:28 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: SUlYQwwb+S45dyKPobKqvKJZrdPhSrMfII/XLz/6n8U=)
2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=)
3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:e0:77:e4:a7:d9:13:05:5a:02:d8:eb:4c:e5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Nov 4 20:00:28 2025 GMT
Not After : Nov 5 20:00:28 2025 GMT
Subject: CN=49de59b2cb0081b31b596328cb5f66275dd0815e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2b:f6:0e:bf:0b:dc:ed:91:c9:8f:86:ef:8f:
ca:9a:ec:37:5f:4e:a8:8b:c0:8b:17:82:03:13:3f:
d7:f8:4e:b4:72:ad:41:7b:75:95:a4:f8:09:57:bc:
48:8d:b1:07:d4:34:2f:36:f5:be:62:9a:7f:4d:58:
58:6a:40:f2:91:a8:c8:ce:c6:1a:2f:c8:80:7c:88:
ab:c4:2f:e5:52:ea:fe:8b:fc:2f:35:30:33:68:10:
77:cb:8b:eb:54:5c:82:26:cf:0a:47:bb:c9:a8:51:
ed:8e:f4:73:72:ca:ec:e3:5f:42:2a:0c:92:dd:a6:
f6:d3:71:53:f5:29:7d:4d:93:e4:df:6b:6c:08:7f:
ab:81:6f:0c:3f:5e:5a:62:7d:4c:ff:e4:e7:bc:15:
fc:5c:65:af:da:7b:74:cc:48:8c:3f:20:81:7c:09:
28:da:3b:0b:ae:4e:2e:6c:40:c5:8c:a8:be:25:40:
16:7b:f2:48:4c:77:5b:bb:d8:78:f4:56:2b:84:00:
69:a9:42:49:d9:8a:52:ca:0d:d7:08:52:3d:3f:3e:
f8:e0:bf:15:50:db:4d:b0:a5:91:b7:17:94:5b:1e:
15:3e:f8:69:f4:e2:d5:1c:58:3a:4d:30:ac:7f:f8:
05:c4:4e:e8:e4:a7:0e:5b:42:28:98:ff:5f:22:3e:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DE:59:B2:CB:00:81:B3:1B:59:63:28:CB:5F:66:27:5D:D0:81:5E
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:31:28:71:1f:c6:b1:30:45:53:9b:ef:6f:8c:15:dd:1f:65:
e0:8a:b7:e1:d5:c4:19:f3:18:e4:6e:67:cd:80:58:6c:74:8e:
39:e7:95:ca:a8:d8:14:52:67:0e:07:e5:a9:aa:79:52:a8:23:
39:ef:d7:d2:14:f6:c2:4c:5f:d6:ca:8e:bf:22:44:b8:62:5c:
2d:e5:14:38:4b:38:f4:2a:15:c0:2e:9e:5e:8c:54:36:71:17:
f6:d8:40:ca:7c:cc:48:2c:18:a0:de:d5:a6:04:62:77:56:f8:
40:bf:5c:51:01:19:1a:10:6d:d5:a3:ad:29:33:fa:56:41:f7:
80:52:3a:b0:c7:4a:d3:00:09:77:f6:fc:c2:b1:39:b5:ff:e7:
f5:ca:ab:87:1c:c3:ba:54:e8:16:b8:b5:2a:de:78:22:f2:48:
bc:b4:66:6b:66:a1:7f:8e:bd:b4:8d:20:11:31:fd:ae:3a:41:
ec:0f:37:95:a2:4d:e6:2a:87:e8:37:4d:9b:c3:c2:25:a5:f5:
fb:7b:7d:7e:c6:30:2d:05:4f:c3:ad:14:4b:d9:a6:8e:61:f1:
bb:c6:b0:cd:3c:f2:30:b1:8d:d6:5c:29:75:ae:47:d3:6c:4b:
83:1a:39:57:d7:81:79:79:03:23:ec:34:54:96:58:ea:77:39:
64:d2:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:19 2025 by rpki-client